Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NO7jne0Dsqb9XijIisckTO1DKdg.cer
File: NO7jne0Dsqb9XijIisckTO1DKdg.cer (raw, json)
Hash identifier: ZQsEzBDrYl+NhiY/2a+qM+o8CHOxMplEyMimdFMWv3c=
Subject key identifier: 34:EE:E3:9D:ED:03:B2:A6:FD:5E:28:C8:8A:C7:24:4C:ED:43:29:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC794284328439F748E1CDF5F9937AFC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 83.243.124.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:28:43:28:43:9f:74:8e:1c:df:5f:99:37:af:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34eee39ded03b2a6fd5e28c88ac7244ced4329d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:93:3b:eb:00:2e:a3:1d:44:da:cf:74:6b:
29:da:7a:35:12:46:03:1e:99:55:1f:bb:65:1b:39:
3f:93:10:ce:12:ab:37:9d:07:83:dc:34:aa:8a:96:
fc:b6:8c:73:e0:d4:37:b2:f5:14:45:fa:70:d0:5d:
d6:45:3f:ff:dc:47:e1:a9:19:85:8e:14:13:6a:5d:
d8:af:68:60:5a:5c:54:f4:3d:8e:3c:1e:a8:3f:24:
a4:2b:a2:7e:e5:d8:62:e1:db:20:2e:39:29:50:70:
15:92:71:71:a6:d1:bc:61:c4:f3:83:96:ea:7d:e5:
d8:d0:96:45:e2:30:3b:d7:41:78:63:41:d7:8a:6e:
0c:f6:5d:8f:01:d8:11:81:28:5a:56:06:21:0c:13:
bb:1e:fa:88:5d:c9:c2:c5:ec:90:b3:3e:2f:ed:07:
a8:0f:69:0d:18:6b:b0:62:8c:99:1b:53:27:de:f9:
85:e4:ff:87:44:29:97:09:f7:aa:ce:08:28:e7:42:
7f:51:b6:03:8e:27:6e:a0:2f:97:b3:74:66:0e:59:
1e:3e:72:74:ed:ee:66:71:51:b8:06:90:fd:21:74:
d3:cc:b4:45:ab:62:16:e2:5b:34:d9:52:5f:97:0c:
01:28:65:cf:c5:65:45:4d:db:40:0a:de:f1:39:6a:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EE:E3:9D:ED:03:B2:A6:FD:5E:28:C8:8A:C7:24:4C:ED:43:29:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.124.0/22
Signature Algorithm: sha256WithRSAEncryption
19:77:8a:a0:b7:ef:79:95:7f:49:99:b1:9a:b8:1e:0e:64:3a:
57:9e:d3:92:73:25:2e:a5:4c:30:14:a4:dc:24:7a:19:2e:44:
91:82:1c:db:12:75:d7:f5:d4:2c:08:7b:7a:ef:11:6c:84:f3:
5a:f7:cf:0d:01:77:df:06:fb:e1:2b:0b:50:38:80:e6:9d:4d:
3b:55:ba:3d:8f:c3:75:20:dc:bb:59:c4:28:c9:78:07:98:d7:
cf:9a:15:95:be:2c:30:e5:fd:bd:9e:a1:32:cd:c2:ec:f4:fb:
0e:f0:66:10:ce:09:d7:bb:24:d5:06:ea:a6:9c:30:e5:75:cd:
90:7a:02:fa:09:6b:22:94:9d:a7:0d:53:a3:dd:44:e3:97:4b:
2d:db:a1:c0:50:58:6e:e0:bc:ba:81:de:ba:b6:bf:0c:7a:13:
ab:11:23:0f:52:4d:09:22:e0:41:d6:8f:27:ba:c1:a0:f4:6d:
56:bd:97:bc:ee:9d:a6:69:c0:69:82:e9:d7:10:2d:63:99:77:
25:66:44:c8:ed:54:da:49:a9:45:9d:59:43:d4:39:98:95:08:
db:1e:25:5b:e0:a8:7c:f4:03:e2:e5:1b:60:22:4f:e8:a7:0b:
19:fc:82:08:ae:df:6f:da:af:65:7c:7a:d0:40:c1:41:87:c5:
43:45:5d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:13:21 2024 by rpki-client on console-fra.rpki-client.org